The service may be configured to derive numeric metrics from log entries that match a query or filter, for performance monitoring and alerting.
Log-based Metrics
CCC.Logging.CP11
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Logging.TH01 | Log Entries are Delayed or Dropped During Ingestion | Log volume bursts, ingestion quota throttling, network bottlenecks, slow transformation rules, or custom-format entries that fail to parse may delay the ingestion pipeline or overflow agent and sink buffers. Log entries arrive late or are dropped, so log-based metrics under-count, detections fire after the fact and the audit trail has gaps, reducing the availability and integrity of log data. |